@gmickel/gno 1.12.4 → 1.13.0

package/src/serve/public/pages/Connectors.tsx

@@ -1,9 +1,11 @@
 import {
+  AlertCircleIcon,
   BotIcon,
   CheckCircle2Icon,
   CpuIcon,
   Loader2Icon,
   PlugZapIcon,
+  SearchCheckIcon,
 } from "lucide-react";
 import { useCallback, useEffect, useState } from "react";
 
@@ -40,12 +42,35 @@ interface ConnectorStatus {
 
 interface ConnectorsResponse {
   connectors: ConnectorStatus[];
+  collections: string[];
+}
+
+interface ConnectorVerificationResponse {
+  verification: {
+    collection: string;
+    lexicalReady: boolean;
+    connectorReady: boolean;
+    generatedAt: string;
+    stages: {
+      connector: {
+        status: "passed" | "pending" | "failed" | "skipped";
+        code?: string;
+      };
+    };
+  };
+  remediation: string | null;
 }
 
 export default function Connectors({ navigate }: PageProps) {
   const [connectors, setConnectors] = useState<ConnectorStatus[]>([]);
+  const [collections, setCollections] = useState<string[]>([]);
+  const [selectedCollection, setSelectedCollection] = useState("");
   const [error, setError] = useState<string | null>(null);
   const [installingId, setInstallingId] = useState<string | null>(null);
+  const [verifyingId, setVerifyingId] = useState<string | null>(null);
+  const [verificationById, setVerificationById] = useState<
+    Record<string, ConnectorVerificationResponse>
+  >({});
 
   const loadConnectors = useCallback(async () => {
     const { data, error: err } =
@@ -56,6 +81,11 @@ export default function Connectors({ navigate }: PageProps) {
     }
 
     setConnectors(data?.connectors ?? []);
+    const nextCollections = data?.collections ?? [];
+    setCollections(nextCollections);
+    setSelectedCollection((current) =>
+      nextCollections.includes(current) ? current : (nextCollections[0] ?? "")
+    );
     setError(null);
   }, []);
 
@@ -83,6 +113,37 @@ export default function Connectors({ navigate }: PageProps) {
     await loadConnectors();
   };
 
+  const handleVerify = async (connectorId: string) => {
+    if (!selectedCollection) {
+      setError("Add and index a collection before verifying retrieval.");
+      return;
+    }
+
+    setVerifyingId(connectorId);
+    setError(null);
+    const { data, error: err } = await apiFetch<ConnectorVerificationResponse>(
+      "/api/connectors/verify",
+      {
+        method: "POST",
+        body: JSON.stringify({
+          connectorId,
+          collection: selectedCollection,
+        }),
+      }
+    );
+    setVerifyingId(null);
+
+    if (err || !data) {
+      setError(err ?? "Connector verification could not be completed.");
+      return;
+    }
+
+    setVerificationById((current) => ({
+      ...current,
+      [connectorId]: data,
+    }));
+  };
+
   return (
     <div className="min-h-screen">
       <main className="mx-auto max-w-6xl p-8">
@@ -103,9 +164,29 @@ export default function Connectors({ navigate }: PageProps) {
               opt-in instead of something the app quietly enables for you.
             </p>
           </div>
-          <Button onClick={() => navigate("/")} variant="outline">
-            Back to Dashboard
-          </Button>
+          <div className="flex flex-col items-end gap-3">
+            <Button onClick={() => navigate("/")} variant="outline">
+              Back to Dashboard
+            </Button>
+            {collections.length > 0 && (
+              <label className="flex items-center gap-2 font-mono text-muted-foreground text-xs">
+                Proof collection
+                <select
+                  className="cursor-pointer rounded border border-border/60 bg-background px-2 py-1.5 text-foreground outline-none focus-visible:ring-2 focus-visible:ring-primary/50"
+                  onChange={(event) =>
+                    setSelectedCollection(event.currentTarget.value)
+                  }
+                  value={selectedCollection}
+                >
+                  {collections.map((collection) => (
+                    <option key={collection} value={collection}>
+                      {collection}
+                    </option>
+                  ))}
+                </select>
+              </label>
+            )}
+          </div>
         </div>
 
         {error && (
@@ -115,62 +196,142 @@ export default function Connectors({ navigate }: PageProps) {
         )}
 
         <div className="grid gap-4 md:grid-cols-2 xl:grid-cols-3">
-          {connectors.map((connector) => (
-            <Card className="border-border/60 bg-card/70" key={connector.id}>
-              <CardHeader className="space-y-3 pb-3">
-                <div className="flex items-center justify-between gap-3">
-                  <div className="flex items-center gap-2">
-                    <BotIcon className="size-4 text-primary" />
-                    <CardTitle className="text-base">
-                      {connector.appName}
-                    </CardTitle>
+          {connectors.map((connector) => {
+            const verification = verificationById[connector.id];
+            return (
+              <Card className="border-border/60 bg-card/70" key={connector.id}>
+                <CardHeader className="space-y-3 pb-3">
+                  <div className="flex items-center justify-between gap-3">
+                    <div className="flex items-center gap-2">
+                      <BotIcon className="size-4 text-primary" />
+                      <CardTitle className="text-base">
+                        {connector.appName}
+                      </CardTitle>
+                    </div>
+                    {connector.installed ? (
+                      <CheckCircle2Icon className="size-4 text-green-500" />
+                    ) : (
+                      <CpuIcon className="size-4 text-muted-foreground" />
+                    )}
                   </div>
-                  {connector.installed ? (
-                    <CheckCircle2Icon className="size-4 text-green-500" />
-                  ) : (
-                    <CpuIcon className="size-4 text-muted-foreground" />
+                  <CardDescription>{connector.summary}</CardDescription>
+                </CardHeader>
+                <CardContent className="space-y-4 text-sm">
+                  <div className="rounded-lg border border-border/50 bg-background/70 p-3">
+                    <div className="mb-1 font-medium">
+                      {connector.mode.label}
+                    </div>
+                    <p className="text-muted-foreground">
+                      {connector.mode.detail}
+                    </p>
+                  </div>
+                  <div className="space-y-1">
+                    <div>
+                      <span className="font-medium">Install type:</span>{" "}
+                      {connector.installKind.toUpperCase()}
+                    </div>
+                    <div>
+                      <span className="font-medium">Scope:</span>{" "}
+                      {connector.scope}
+                    </div>
+                    <div className="font-mono text-muted-foreground text-xs">
+                      {connector.path}
+                    </div>
+                  </div>
+                  {connector.error && (
+                    <p className="text-destructive text-sm">
+                      {connector.error}
+                    </p>
                   )}
-                </div>
-                <CardDescription>{connector.summary}</CardDescription>
-              </CardHeader>
-              <CardContent className="space-y-4 text-sm">
-                <div className="rounded-lg border border-border/50 bg-background/70 p-3">
-                  <div className="mb-1 font-medium">{connector.mode.label}</div>
                   <p className="text-muted-foreground">
-                    {connector.mode.detail}
+                    {connector.nextAction}
                   </p>
-                </div>
-                <div className="space-y-1">
-                  <div>
-                    <span className="font-medium">Install type:</span>{" "}
-                    {connector.installKind.toUpperCase()}
-                  </div>
-                  <div>
-                    <span className="font-medium">Scope:</span>{" "}
-                    {connector.scope}
-                  </div>
-                  <div className="font-mono text-muted-foreground text-xs">
-                    {connector.path}
-                  </div>
-                </div>
-                {connector.error && (
-                  <p className="text-destructive text-sm">{connector.error}</p>
-                )}
-                <p className="text-muted-foreground">{connector.nextAction}</p>
-                <Button
-                  className="w-full"
-                  onClick={() => void handleInstall(connector.id)}
-                  size="sm"
-                  variant={connector.installed ? "outline" : "default"}
-                >
-                  {installingId === connector.id ? (
-                    <Loader2Icon className="mr-2 size-4 animate-spin" />
-                  ) : null}
-                  {connector.installed ? "Reinstall" : "Install"}
-                </Button>
-              </CardContent>
-            </Card>
-          ))}
+                  {connector.installed && connector.installKind === "skill" && (
+                    <div className="rounded border border-secondary/30 bg-secondary/10 p-3">
+                      <div className="flex items-center gap-2 font-medium text-secondary text-xs">
+                        <AlertCircleIcon className="size-3.5" />
+                        Runtime verification unavailable
+                      </div>
+                      <p className="mt-1 text-muted-foreground text-xs">
+                        target_runtime_unverifiable — this client exposes no
+                        safe read-only runtime hook. The skill file is
+                        installed, but GNO cannot claim the agent used it.
+                      </p>
+                    </div>
+                  )}
+                  {connector.installed && connector.installKind === "mcp" && (
+                    <div className="space-y-3 border-border/50 border-t pt-4">
+                      <div className="flex items-start gap-2">
+                        <SearchCheckIcon className="mt-0.5 size-4 text-primary" />
+                        <div>
+                          <p className="font-medium text-sm">Retrieval proof</p>
+                          <p className="text-muted-foreground text-xs">
+                            Starts this configured MCP once and checks a real,
+                            collection-scoped result. Runs only when requested.
+                          </p>
+                        </div>
+                      </div>
+                      <Button
+                        className="w-full"
+                        disabled={!selectedCollection || verifyingId !== null}
+                        onClick={() => void handleVerify(connector.id)}
+                        size="sm"
+                        variant="secondary"
+                      >
+                        {verifyingId === connector.id ? (
+                          <Loader2Icon className="mr-2 size-4 animate-spin" />
+                        ) : (
+                          <SearchCheckIcon className="mr-2 size-4" />
+                        )}
+                        Verify retrieval
+                      </Button>
+                      {collections.length === 0 && (
+                        <p className="text-muted-foreground text-xs">
+                          Add and index a collection before verifying retrieval.
+                        </p>
+                      )}
+                      {verification && (
+                        <div
+                          aria-live="polite"
+                          className={
+                            verification.verification.stages.connector
+                              .status === "passed"
+                              ? "rounded border border-primary/30 bg-primary/10 p-3 text-xs"
+                              : "rounded border border-secondary/30 bg-secondary/10 p-3 text-xs"
+                          }
+                        >
+                          <p className="font-mono text-foreground uppercase tracking-wide">
+                            {verification.verification.stages.connector.status}
+                            {verification.verification.stages.connector.code
+                              ? ` / ${verification.verification.stages.connector.code}`
+                              : ""}
+                          </p>
+                          <p className="mt-1 text-muted-foreground">
+                            Collection: {verification.verification.collection}
+                          </p>
+                          <p className="mt-2 text-foreground">
+                            {verification.remediation ??
+                              "Retrieval returned the expected indexed source. No action needed."}
+                          </p>
+                        </div>
+                      )}
+                    </div>
+                  )}
+                  <Button
+                    className="w-full"
+                    onClick={() => void handleInstall(connector.id)}
+                    size="sm"
+                    variant={connector.installed ? "outline" : "default"}
+                  >
+                    {installingId === connector.id ? (
+                      <Loader2Icon className="mr-2 size-4 animate-spin" />
+                    ) : null}
+                    {connector.installed ? "Reinstall" : "Install"}
+                  </Button>
+                </CardContent>
+              </Card>
+            );
+          })}
         </div>
       </main>
     </div>

package/src/serve/public/pages/Dashboard.tsx

@@ -520,6 +520,7 @@ export default function Dashboard({ navigate }: PageProps) {
         {status && (
           <div className="mb-10">
             <BootstrapStatus
+              activation={status.activation}
               bootstrap={status.bootstrap}
               onDownloadModels={() => void handleDownloadModels()}
             />

package/src/serve/routes/api.ts

@@ -23,7 +23,12 @@ import type {
   SearchOptions,
 } from "../../pipeline/types";
 import type { SqliteAdapter } from "../../store/sqlite/adapter";
-import type { DocumentRow } from "../../store/types";
+import type {
+  ActivationVerificationReceipt,
+  DocumentRow,
+  StorePort,
+  StoreResult,
+} from "../../store/types";
 import type { DocumentEventBus } from "../doc-events";
 import type { EmbedScheduler } from "../embed-scheduler";
 import type { StartJobError } from "../jobs";
@@ -47,6 +52,10 @@ import {
   type PublicCaptureInput,
 } from "../../core/capture";
 import { writeCapturePlanFile } from "../../core/capture-write";
+import {
+  type ConnectorVerificationCode,
+  getConnectorVerificationRemediation,
+} from "../../core/connector-verifier";
 import {
   buildEditableCopyContent,
   deriveEditableCopyRelPath,
@@ -116,7 +125,11 @@ import {
 import { exportPublishArtifact } from "../../publish/export-service";
 import { buildBrowseTree, normalizeBrowsePath } from "../browse-tree";
 import { applyConfigChange, applyConfigChangeTyped } from "../config-sync";
-import { getConnectorStatuses, installConnector } from "../connectors";
+import {
+  getConnectorStatuses,
+  installConnector,
+  verifyInstalledConnector,
+} from "../connectors";
 import {
   downloadState,
   reloadServerContext,
@@ -153,6 +166,27 @@ export interface InstallConnectorRequestBody {
   reinstall?: boolean;
 }
 
+export interface VerifyConnectorRequestBody {
+  connectorId: string;
+  collection: string;
+}
+
+interface ConnectorRouteDeps {
+  getStatuses: typeof getConnectorStatuses;
+  verify: (
+    id: string,
+    store: StorePort,
+    collection: string,
+    options?: { force?: boolean },
+    overrides?: { cwd?: string; homeDir?: string }
+  ) => Promise<StoreResult<ActivationVerificationReceipt>>;
+}
+
+const DEFAULT_CONNECTOR_ROUTE_DEPS: ConnectorRouteDeps = {
+  getStatuses: getConnectorStatuses,
+  verify: verifyInstalledConnector,
+};
+
 export interface SearchRequestBody {
   query: string;
   // Only BM25 supported in web UI (vector/hybrid require LLM deps)
@@ -4272,18 +4306,120 @@ export function handleEmbedStatus(scheduler: EmbedScheduler | null): Response {
   });
 }
 
-export async function handleConnectors(overrides?: {
-  cwd?: string;
-  homeDir?: string;
-}): Promise<Response> {
+export async function handleConnectors(
+  config: Config,
+  overrides?: { cwd?: string; homeDir?: string },
+  deps: ConnectorRouteDeps = DEFAULT_CONNECTOR_ROUTE_DEPS
+): Promise<Response> {
   return jsonResponse({
-    connectors: await getConnectorStatuses(overrides),
+    connectors: await deps.getStatuses(overrides),
+    collections: config.collections
+      .map(({ name }) => name)
+      .sort((left, right) => left.localeCompare(right)),
   });
 }
 
+/**
+ * Explicitly run one collection-scoped connector retrieval proof.
+ * Passive connector/status routes never call this handler.
+ */
+export async function handleVerifyConnector(
+  config: Config,
+  store: StorePort,
+  req: Request,
+  overrides?: { cwd?: string; homeDir?: string },
+  deps: ConnectorRouteDeps = DEFAULT_CONNECTOR_ROUTE_DEPS
+): Promise<Response> {
+  let body: unknown;
+  try {
+    body = await req.json();
+  } catch {
+    return errorResponse("VALIDATION", "Invalid JSON body");
+  }
+
+  if (!body || typeof body !== "object" || Array.isArray(body)) {
+    return errorResponse("VALIDATION", "Request body must be an object");
+  }
+  const fields = Object.keys(body);
+  const allowedFields = new Set(["connectorId", "collection"]);
+  if (fields.some((field) => !allowedFields.has(field))) {
+    return errorResponse("VALIDATION", "Request body has unknown fields");
+  }
+
+  const { connectorId, collection } = body as Record<string, unknown>;
+  if (
+    typeof connectorId !== "string" ||
+    connectorId.length === 0 ||
+    connectorId.length > 128
+  ) {
+    return errorResponse("VALIDATION", "Missing or invalid connectorId");
+  }
+  if (
+    typeof collection !== "string" ||
+    collection.length === 0 ||
+    collection.length > 64
+  ) {
+    return errorResponse("VALIDATION", "Missing or invalid collection");
+  }
+  if (!config.collections.some(({ name }) => name === collection)) {
+    return errorResponse("VALIDATION", "Unknown collection");
+  }
+
+  try {
+    const statuses = await deps.getStatuses(overrides);
+    const connector = statuses.find(({ id }) => id === connectorId);
+    if (!connector) {
+      return errorResponse("VALIDATION", "Unknown connectorId");
+    }
+
+    const result = await deps.verify(
+      connectorId,
+      store,
+      collection,
+      { force: true },
+      overrides
+    );
+    if (!result.ok) {
+      return errorResponse(
+        "CONNECTOR_VERIFICATION_FAILED",
+        "Connector verification could not be completed",
+        500
+      );
+    }
+
+    const code = result.value.stages.connector.code;
+    return jsonResponse({
+      verification: {
+        collection: result.value.collection,
+        lexicalReady: result.value.ready,
+        connectorReady: result.value.stages.connector.status === "passed",
+        generatedAt: result.value.generatedAt,
+        stages: { connector: result.value.stages.connector },
+      },
+      remediation: code
+        ? getConnectorVerificationRemediation(
+            code as ConnectorVerificationCode,
+            connector.appName
+          )
+        : null,
+    });
+  } catch {
+    return errorResponse(
+      "CONNECTOR_VERIFICATION_FAILED",
+      "Connector verification could not be completed",
+      500
+    );
+  }
+}
+
 export async function handleInstallConnector(
   req: Request,
-  overrides?: { cwd?: string; homeDir?: string }
+  overrides?: {
+    cwd?: string;
+    homeDir?: string;
+    indexName?: string;
+    configPath?: string;
+  }
 ): Promise<Response> {
   let body: InstallConnectorRequestBody;
   try {
@@ -4391,6 +4527,14 @@ export async function routeApi(
     return handleCollections(config);
   }
 
+  if (path === "/api/connectors" && req.method === "GET") {
+    return handleConnectors(config);
+  }
+
+  if (path === "/api/connectors/verify" && req.method === "POST") {
+    return handleVerifyConnector(config, store, req);
+  }
+
   if (path === "/api/publish/export" && req.method === "POST") {
     return handlePublishExport(config, store, req);
   }

package/src/serve/server.ts

@@ -58,6 +58,7 @@ import {
   handleTrashDoc,
   handleUpdateCollection,
   handleUpdateDoc,
+  handleVerifyConnector,
 } from "./routes/api";
 import { handleGraph, handleGraphQuery } from "./routes/graph";
 import {
@@ -81,6 +82,13 @@ export interface ServeResult {
   error?: string;
 }
 
+interface StartServerDependencies {
+  startBackgroundRuntime?: typeof startBackgroundRuntime;
+  serve?: typeof Bun.serve;
+  handleInstallConnector?: typeof handleInstallConnector;
+  waitForShutdown?: (signal: AbortSignal) => Promise<void>;
+}
+
 // Hostname parsing helpers - preserved for future fetch handler use
 // function parseHostname(host: string): string { ... }
 // function isLoopback(hostname: string): boolean { ... }
@@ -135,11 +143,14 @@ function withSecurityHeaders(response: Response, isDev: boolean): Response {
  * Opens DB once, closes on SIGINT/SIGTERM.
  */
 export async function startServer(
-  options: ServeOptions = {}
+  options: ServeOptions = {},
+  dependencies: StartServerDependencies = {}
 ): Promise<ServeResult> {
   const port = options.port ?? 3000;
   const isDev = process.env.NODE_ENV !== "production";
-  const runtimeResult = await startBackgroundRuntime({
+  const runtimeResult = await (
+    dependencies.startBackgroundRuntime ?? startBackgroundRuntime
+  )({
     configPath: options.configPath,
     index: options.index,
     requireCollections: false,
@@ -171,7 +182,7 @@ export async function startServer(
   // Start server with try/catch for port-in-use etc.
   let server: ReturnType<typeof Bun.serve>;
   try {
-    server = Bun.serve({
+    server = (dependencies.serve ?? Bun.serve)({
       port,
       hostname: "127.0.0.1", // Loopback only - no LAN exposure
 
@@ -216,7 +227,11 @@ export async function startServer(
           },
         },
         "/api/connectors": {
-          GET: async () => withSecurityHeaders(await handleConnectors(), isDev),
+          GET: async () =>
+            withSecurityHeaders(
+              await handleConnectors(ctxHolder.config),
+              isDev
+            ),
         },
         "/api/connectors/install": {
           POST: async (req: Request) => {
@@ -224,7 +239,23 @@ export async function startServer(
               return withSecurityHeaders(forbiddenResponse(), isDev);
             }
             return withSecurityHeaders(
-              await handleInstallConnector(req),
+              await (
+                dependencies.handleInstallConnector ?? handleInstallConnector
+              )(req, {
+                indexName: options.index,
+                configPath: runtime.actualConfigPath,
+              }),
+              isDev
+            );
+          },
+        },
+        "/api/connectors/verify": {
+          POST: async (req: Request) => {
+            if (!isRequestAllowed(req, port)) {
+              return withSecurityHeaders(forbiddenResponse(), isDev);
+            }
+            return withSecurityHeaders(
+              await handleVerifyConnector(ctxHolder.config, store, req),
               isDev
             );
           },
@@ -695,11 +726,15 @@ export async function startServer(
   console.log("Press Ctrl+C to stop");
 
   // Block until shutdown signal
-  await new Promise<void>((resolve) => {
-    shutdownController.signal.addEventListener("abort", () => resolve(), {
-      once: true,
+  if (dependencies.waitForShutdown) {
+    await dependencies.waitForShutdown(shutdownController.signal);
+  } else {
+    await new Promise<void>((resolve) => {
+      shutdownController.signal.addEventListener("abort", () => resolve(), {
+        once: true,
+      });
     });
-  });
+  }
 
   removeShutdownHandlers();
   try {

package/src/serve/status-model.ts

@@ -1,3 +1,5 @@
+import type { ActivationStatus } from "../core/activation-status";
+
 export type HealthCheckStatus = "ok" | "warn" | "error";
 
 export type HealthActionKind =
@@ -29,6 +31,7 @@ export interface OnboardingStep {
   title: string;
   status: OnboardingStepStatus;
   detail: string;
+  action?: "add-collection" | "download-models" | "sync" | "embed";
 }
 
 export interface OnboardingState {
@@ -142,6 +145,7 @@ export interface AppStatusResponse {
     hybrid: boolean;
     answer: boolean;
   };
+  activation: ActivationStatus;
   onboarding: OnboardingState;
   health: HealthCenterState;
   background: BackgroundServiceState;